Fixed sql injections, discovered by @chusoPR (thanks).



git-svn-id: file:///home/gallir/meneame/svn/src@4151 cbe1a1ec-7179-4919-8e32-4551e8279a00